Motorola AP-7131N-FGR Product Reference Manual page 110

4-20 AP-7131N-FGR Access Point Product Reference Guide
certificate. A browser must contain this CA certificate in its Trusted Root Library so it can trust
certificates "signed" by the CA's private key.
Depending on the public key infrastructure, the digital certificate includes the owner's public key, the
certificate expiration date, the owner's name and other public key owner information.
The access point can import and maintain a set of CA certificates to use as an authentication option
for Virtual Private Network (VPN) access. To use the certificate for a VPN tunnel, define a tunnel and
select the IKE settings to using DES certificates. For additional information on configuring VPN
tunnels, see Configuring VPN Tunnels on page
CAUTION Loaded and signed CA certificates will be lost when changing the
!
Refer to your network administrator to obtain a CA certificate to import into the access point.
NOTE Verify the access point device time is synchronized with an NTP server
To import a CA certificate:
1. Select System Configuration
tree.
access point's firmware version using either the GUI or CLI. After a
certificate has been successfully loaded, export it to a secure location
to ensure its availability after a firmware update.
If restoring the access point's factory default firmware, you must
export the certificate file BEFORE restoring the access point's factory
default configuration. Import the file back after the updated firmware
is installed. For information on using the access point CLI to import
and export the access point's configuration, see
AP7131N>admin(system.cmgr)> impcert on page 8-184
AP7131N>admin(system.cmgr)> expcert on page
before importing a certificate to avoid issues with conflicting date/time
stamps. For more information, see
(NTP) on page 4-44.
-> Certificate Mgmt
6-23.
Configuring Network Time Protocol
-> CA Certificates
and
8-183.
from the menu